research
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest information from external primary sources such as official documentation, source code, and specifications. This creates a surface for indirect prompt injection, where adversarial content hidden in those sources could attempt to influence the agent's research summary or behavior.
- Ingestion points: External documentation, source code, and first-party APIs (referenced in SKILL.md).
- Boundary markers: None specified; the skill does not instruct the agent to use delimiters or ignore instructions found within the source material.
- Capability inventory: The skill performs file writing to the
docs/research/directory. - Sanitization: No specific sanitization or filtering of external content is mentioned before it is committed to the research markdown file.
- [NO_CODE]: This skill consists of markdown instructions and configuration files. It does not contain any scripts, executables, or automated code triggers.
Audit Metadata